Memory corruption

The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption...

Stack overflow

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a...

CVE-2007-0025

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a...

CVE-2007-0026

The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption...

Memory corruption

The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an R...

CVE-2006-1311

CVE-2006-1311 is a remote code execution vulnerability in Microsoft RichEdit. The RichEdit components in Windows 2000 SP4, XP SP2, 2003 SP1 and Office suites (2000 SP3, XP SP3, 2003 SP2) plus Office for Mac 2004 and Learning Essentials are affected. The flaw arises from insufficient validation wh...

CVE-2007-0026

The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption...

CVE-2006-1311

The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an R...

CVE-2007-0026

The CVE-2007-0026 issue affects Microsoft Windows (older OSes: Windows 2000 SP4, XP SP2, 2003 SP1) where the OLE Dialog component parses OLE objects embedded in RTF documents. The root cause is improper validation when parsing embedded OLE objects in RTF, causing memory corruption that could allo...

Microsoft Windows OLE dialog memory corruption

Memory corruption on RTF-embedded OLE object. Can be used for hideen malware installation...

Microsoft Security Bulletin MS07-011 Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436)

Microsoft Security Bulletin MS07-011 Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution 926436 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...

Microsoft Windows RiсhEdit control memory corruption

Memory corruption in RF-enbedded OLE object can be used for hidden malware installation...

Microsoft Windows OLE Dialog Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that occurs when the application attempts to parse malformed Rich Text Files RTF. An attacker could exploit this issue by enticing a victim to load a malicious RTF file. If the vulnerability is successfully exploited,...

MS07-011: Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436)

The remote host contains a version of Microsoft Windows that has a vulnerability in the OLE Dialog component that could be abused by an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker would need to send a specially crafted RTF file to a user on th...

System safety SA weak passwords bring security risks-vulnerability warning-the black bar safety net

The presence of the Microsoft SQL Server SA of the weak password vulnerability of the computer has been cyber attackers favor of one of the objects, through this loophole, you can easily get the Server Management permission, and thus a threat to network and data security. As a network...

Oracle ORADC ActiveX控件远程代码执行漏洞

Oracle ORADC是一款用于VB的Oracle ActiveX控件。 Oracle ORADC存在缓冲区溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能执行任意指令。 构建如下页面，诱使用户访问，可导致任意代码执行： !-- // CLSID: EC4CF635-D196-11CE-9027-02608C4BF3B5 // Info: ORADC Control // ProgID: ORADC.ORADCCtrl.1 // InprocServer32: C:\Oracle\Ora81\bin\oradc.ocx --! html body OBJECT...

CentOS 3 / 4 : libgsf (CESA-2007:0011)

Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing structured file formats. A heap based buff...

libgsf security update

CentOS Errata and Security Advisory CESA-2007:0011 Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and...

Moderate: Red Hat Security Advisory: libgsf security update

Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing structured file formats. A heap based buff...

security flaw

Heap-based buffer overflow in the oleinforeadmetabat function in Gnome Structured File library libgsf 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large nummetabat value in an OLE document, which causes the oleinitinfo function to...